CVE-2008-4404

2022-10-0316:13:58

mitre

www.cve.org

ibm zseries

ndp vulnerability

denial of service

private network traffic

cve-2008-4404

spoofed message

forward information base

fib

remote attackers

6.2 Medium

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.6%

JSON

The IPv6 Neighbor Discovery Protocol (NDP) implementation on IBM zSeries servers does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB), a related issue to CVE-2008-2476.